Epic said its technology roadmap remains unchanged after CEO and founder Judy Faulkner disclosed the EHR vendor had paused most technology development to focus on cybersecurity.
Ms. Faulkner told attendees at Modern Healthcare’s Leadership Summit that the pause involves hundreds of projects as Epic works to ensure its systems are secure and not vulnerable to cyberattacks, according to a Sept. 22 report from Modern Healthcare. She added that the security work is expected to continue for about six more weeks, though she suspects development is continuing in some areas.
“Our development roadmap hasn’t changed since we presented it at our August 2026 Users Group Meeting,” an Epic spokesperson told Becker’s.
Epic also pointed to several technology initiatives it said continue to advance while the company focuses on cybersecurity.
“We’re participating in Project Glasswing and using AI tools to stay ahead of cybersecurity threats that are growing across all industries,” the spokesperson said. “We’re also continuing rapid progress in many areas: expanded AI capabilities, Agent Factory, EpicOps, interoperability to speed up prior authorization, and more.”
Ms. Faulkner also indicated that Epic’s development process could look different once the current security work is completed, with cybersecurity becoming a more constant consideration as new threats emerge.
Epic publicly confirmed its participation in Project Glasswing during its August Users Group Meeting. The Anthropic initiative gives participating organizations access to advanced AI capabilities to search for software vulnerabilities before similar capabilities become more widely available.
Epic Chief Security Officer Stirling Martin said at the meeting that the company was a participant in Project Glasswing and a heavy user of Mythos, an Anthropic AI model with advanced cybersecurity capabilities.
Epic has used the models against its own codebase, which spans several hundred million lines, and said the technology surfaced potential vulnerabilities its developers had previously missed.
Mr. Martin also told health system leaders to expect a higher-than-usual number of urgent security fixes from Epic as the company uses the technology to uncover potential vulnerabilities.
The cybersecurity work comes as Epic continues pursuing the broader technology roadmap it outlined at its Users Group Meeting, including expanded AI capabilities, Agent Factory, EpicOps and tools aimed at speeding prior authorization.
Epic’s Agent Factory allows organizations to build, monitor and evaluate AI agents for healthcare workflows. In September, 25 health systems participated in Epic’s second Agent Factory Build-a-Thon, developing agents for clinical and operational uses.
